
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json)
Hash identifier: FwiFocG+drr47z7D5ur9WUj/CctCivflghzHt3nZrE8=
Subject key identifier: C2:81:20:0D:2C:57:6B:58:36:E2:67:93:D3:F4:95:4B:6A:04:4D:A3
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial: 070E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
Manifest number: 06FC
Signing time: Mon 02 Mar 2026 00:46:07 +0000
Manifest this update: Mon 02 Mar 2026 00:46:06 +0000
Manifest next update: Mon 09 Mar 2026 00:46:06 +0000
Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: BS08LJ+OEW+gvp3WZK4hvyEydvZ/Q3tothywCrp+eEE=)
2: 88A31320809211EB938F4016C4F9AE02.roa (hash: hQTt0AFzBYtxdeGsE5h3TYl3htX01dC5soXQmdrd9Fo=)
3: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: rQHi52MocQB/prtSJtGO8uedEqwHLU7/+mRUSwiw+1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Validity
Not Before: Mar 2 00:46:06 2026 GMT
Not After : Mar 9 00:46:06 2026 GMT
Subject: CN=69a4ddcf-82df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:94:dd:b9:82:f1:a2:c1:aa:0c:0f:06:18:2c:
7d:b2:48:bc:b6:60:50:fc:76:7f:b9:15:0a:5c:fc:
5d:f9:63:18:46:b4:8b:1a:e7:1e:96:f1:ae:61:ec:
cd:97:0c:c3:ea:3a:43:83:4c:3e:0e:e8:c8:f8:77:
78:6c:12:71:52:a8:57:ff:ca:59:02:24:6e:3b:a2:
c1:f6:3a:6b:46:8e:33:94:b1:a2:e7:95:b6:d6:4c:
cd:5b:3f:0b:89:44:54:b5:fa:2d:05:e8:2b:8e:a8:
8b:8a:10:83:6b:33:92:62:85:08:39:8d:e8:43:37:
00:d4:1c:ac:43:2d:51:ad:ce:54:66:d4:2a:85:a9:
02:3c:2a:fb:87:ce:6c:8c:80:6b:f5:f6:16:8a:ae:
40:80:29:59:38:c7:86:72:1f:2d:be:81:27:a9:c8:
46:b2:79:67:1c:0a:bb:e4:da:79:27:49:e0:d8:65:
1d:af:7b:c8:57:9f:10:81:96:2d:12:c1:bd:36:48:
08:da:4b:26:6e:35:5e:6c:b6:c2:e4:2c:c5:ff:90:
ce:24:96:6f:cb:d1:1b:e7:2c:52:1d:28:90:e7:80:
dc:19:e7:f7:85:2f:fd:82:ca:f1:02:7f:8e:59:a7:
72:39:0f:4d:fd:bc:1b:9f:fd:40:7c:0a:46:75:6e:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:81:20:0D:2C:57:6B:58:36:E2:67:93:D3:F4:95:4B:6A:04:4D:A3
X509v3 Authority Key Identifier:
keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2c:1b:64:b2:d6:65:b4:7b:67:12:6d:87:ee:6e:2f:b5:ad:
90:63:81:1a:2e:0f:3d:49:95:77:5d:ca:74:b0:2f:c8:2c:6b:
f3:54:b3:e4:a1:15:c6:06:3f:8c:85:92:72:52:27:8d:92:c8:
d5:ed:54:57:9c:6f:9d:93:b6:09:c6:8b:5d:de:46:f1:7b:7e:
e7:cb:ad:15:44:c7:53:91:7a:52:92:4e:25:c2:d4:ca:aa:85:
9c:6e:17:c9:ad:ec:3f:8b:dd:43:45:b8:98:ef:80:9d:6f:4e:
6f:68:d2:fa:25:c9:d5:cb:26:23:ea:c5:e4:62:a8:99:5a:a9:
10:cd:85:55:70:3e:e6:b1:a3:1a:c7:08:e6:eb:e5:8c:59:c9:
a0:2e:a9:70:d5:b1:f4:3a:0b:bc:4c:c9:4e:d5:ec:c5:6d:85:
d1:69:b2:6a:bb:cd:a4:c4:70:64:e3:71:5a:0e:8e:4a:63:13:
69:0c:c5:b3:1d:71:fd:22:06:ec:ef:51:3a:a6:2f:3a:6b:b4:
ec:49:f8:6b:c6:9e:b7:c4:e0:34:c5:a3:8b:f6:09:95:df:83:
1d:a7:70:e4:06:a6:c4:a1:4b:e7:77:9e:8f:0c:95:a1:92:e0:
64:d9:7e:00:e7:be:2a:1a:db:d6:7d:fa:41:59:42:28:a0:c6:
bd:47:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:34 2026 by rpki-client